Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. 2026/01/03 03:30:38 parsed 1 programs [ 102.723863][ T43] cfg80211: failed to load regulatory.db [ 104.798512][ T5834] cgroup: Unknown subsys name 'net' [ 105.014664][ T5834] cgroup: Unknown subsys name 'cpuset' [ 105.024208][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 106.804377][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.958822][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.636548][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.646234][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.654689][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.663938][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.671862][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.034316][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.043480][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.089185][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.097695][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.719699][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 111.885458][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.896285][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.904409][ T5880] bridge_slave_0: entered allmulticast mode [ 111.912908][ T5880] bridge_slave_0: entered promiscuous mode [ 111.924332][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.931873][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.939194][ T5880] bridge_slave_1: entered allmulticast mode [ 111.947116][ T5880] bridge_slave_1: entered promiscuous mode [ 111.994646][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.007483][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.046994][ T5880] team0: Port device team_slave_0 added [ 112.056508][ T5880] team0: Port device team_slave_1 added [ 112.088660][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.096382][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.122550][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.136015][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.143288][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.170606][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.218144][ T5880] hsr_slave_0: entered promiscuous mode [ 112.225136][ T5880] hsr_slave_1: entered promiscuous mode [ 112.391888][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.406210][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.417352][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.428999][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.523446][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.548936][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.567702][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.575071][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.592432][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.599766][ T4491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.803096][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.850868][ T5880] veth0_vlan: entered promiscuous mode [ 112.864080][ T5880] veth1_vlan: entered promiscuous mode [ 112.903154][ T5880] veth0_macvtap: entered promiscuous mode [ 112.915911][ T5880] veth1_macvtap: entered promiscuous mode [ 112.937474][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.955272][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.971350][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.983449][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.995211][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.006353][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.171580][ T4050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.229770][ T4050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.310230][ T4050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.409602][ T4050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/03 03:30:52 executed programs: 0 [ 115.235101][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.246098][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.254117][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.264050][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.272400][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.465281][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 115.564665][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.572442][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.579798][ T5940] bridge_slave_0: entered allmulticast mode [ 115.587644][ T5940] bridge_slave_0: entered promiscuous mode [ 115.596891][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.605949][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.613890][ T5940] bridge_slave_1: entered allmulticast mode [ 115.621867][ T5940] bridge_slave_1: entered promiscuous mode [ 115.656980][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.669162][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.707482][ T5940] team0: Port device team_slave_0 added [ 115.716503][ T5940] team0: Port device team_slave_1 added [ 115.748630][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.755808][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.782894][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.795458][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.802560][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.829474][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.878379][ T5940] hsr_slave_0: entered promiscuous mode [ 115.885284][ T5940] hsr_slave_1: entered promiscuous mode [ 115.891983][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 115.897839][ T5940] Cannot create hsr debugfs directory [ 116.118957][ T4050] bridge_slave_1: left allmulticast mode [ 116.140088][ T4050] bridge_slave_1: left promiscuous mode [ 116.146768][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.162980][ T4050] bridge_slave_0: left allmulticast mode [ 116.169059][ T4050] bridge_slave_0: left promiscuous mode [ 116.175996][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.517753][ T4050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.531440][ T4050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.542857][ T4050] bond0 (unregistering): Released all slaves [ 116.671917][ T4050] hsr_slave_0: left promiscuous mode [ 116.678273][ T4050] hsr_slave_1: left promiscuous mode [ 116.688202][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.698201][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.710916][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.723541][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.745344][ T4050] veth1_macvtap: left promiscuous mode [ 116.752886][ T4050] veth0_macvtap: left promiscuous mode [ 116.758654][ T4050] veth1_vlan: left promiscuous mode [ 116.764801][ T4050] veth0_vlan: left promiscuous mode [ 117.132249][ T4050] team0 (unregistering): Port device team_slave_1 removed [ 117.160732][ T4050] team0 (unregistering): Port device team_slave_0 removed [ 117.373554][ T52] Bluetooth: hci0: command tx timeout [ 117.683580][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.697087][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.716312][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.736031][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.892586][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.916652][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.367722][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.374961][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.444163][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.451558][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.045883][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.164880][ T5940] veth0_vlan: entered promiscuous mode [ 119.181695][ T5940] veth1_vlan: entered promiscuous mode [ 119.213437][ T5940] veth0_macvtap: entered promiscuous mode [ 119.224000][ T5940] veth1_macvtap: entered promiscuous mode [ 119.244515][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.259549][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.274100][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.285396][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.297992][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.307747][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.367446][ T4050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.380513][ T4050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.411480][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.419597][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.441730][ T52] Bluetooth: hci0: command tx timeout [ 120.101940][ C1] ================================================================== [ 120.110076][ C1] BUG: KASAN: slab-out-of-bounds in strnchr+0x5e/0x80 [ 120.116903][ C1] Read of size 1 at addr ffff888029e093b0 by task ksoftirqd/1/23 [ 120.124679][ C1] [ 120.127062][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 120.127083][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.127102][ C1] Call Trace: [ 120.127112][ C1] [ 120.127122][ C1] dump_stack_lvl+0x189/0x250 [ 120.127147][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 120.127171][ C1] ? rcu_is_watching+0x15/0xb0 [ 120.127191][ C1] ? __kasan_check_byte+0x12/0x40 [ 120.127212][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.127231][ C1] ? rcu_is_watching+0x15/0xb0 [ 120.127251][ C1] ? lock_release+0x4b/0x3b0 [ 120.127286][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 120.127309][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 120.127332][ C1] print_report+0xca/0x240 [ 120.127350][ C1] ? strnchr+0x5e/0x80 [ 120.127367][ C1] kasan_report+0x118/0x150 [ 120.127385][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 120.127405][ C1] ? strnchr+0x5e/0x80 [ 120.127425][ C1] strnchr+0x5e/0x80 [ 120.127444][ C1] bpf_bprintf_prepare+0x167/0x13d0 [ 120.127472][ C1] ? stack_trace_save+0x9c/0xe0 [ 120.127499][ C1] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 120.127522][ C1] ? kasan_save_stack+0x60/0x60 [ 120.127540][ C1] ? bpf_snprintf+0x47/0x1b0 [ 120.127564][ C1] bpf_snprintf+0xd3/0x1b0 [ 120.127590][ C1] bpf_prog_c2925c0a7ac12d80+0x58/0x60 [ 120.127610][ C1] bpf_trace_run1+0x27f/0x4c0 [ 120.127633][ C1] ? bpf_trace_run1+0x181/0x4c0 [ 120.127655][ C1] ? __pfx_bpf_trace_run1+0x10/0x10 [ 120.127676][ C1] ? __pfx_raise_softirq+0x10/0x10 [ 120.127695][ C1] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 120.127718][ C1] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 120.127739][ C1] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 120.127758][ C1] ? invoke_rcu_core+0xb6/0x200 [ 120.127779][ C1] ? __pfx_invoke_rcu_core+0x10/0x10 [ 120.127804][ C1] trace_rcu_utilization+0x191/0x1c0 [ 120.127825][ C1] rcu_core+0x13fe/0x1870 [ 120.127851][ C1] ? __pfx_rcu_core+0x10/0x10 [ 120.127870][ C1] ? __schedule+0x14d2/0x5000 [ 120.127885][ C1] ? rcu_qs+0xc4/0x170 [ 120.127903][ C1] ? sched_clock_cpu+0x74/0x430 [ 120.127924][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 120.127943][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 120.127966][ C1] handle_softirqs+0x27d/0x850 [ 120.127985][ C1] ? run_ksoftirqd+0x9b/0x100 [ 120.128007][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 120.128029][ C1] ? preempt_schedule_common+0x83/0xd0 [ 120.128046][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 120.128066][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 120.128083][ C1] run_ksoftirqd+0x9b/0x100 [ 120.128102][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 120.128121][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 120.128141][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 120.128160][ C1] smpboot_thread_fn+0x542/0xa60 [ 120.128179][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 120.128201][ C1] kthread+0x711/0x8a0 [ 120.128223][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 120.128241][ C1] ? __pfx_kthread+0x10/0x10 [ 120.128262][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.128289][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 120.128316][ C1] ? __pfx_kthread+0x10/0x10 [ 120.128337][ C1] ret_from_fork+0x599/0xb30 [ 120.128354][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 120.128374][ C1] ? __switch_to_asm+0x39/0x70 [ 120.128395][ C1] ? __switch_to_asm+0x33/0x70 [ 120.128415][ C1] ? __pfx_kthread+0x10/0x10 [ 120.128436][ C1] ret_from_fork_asm+0x1a/0x30 [ 120.128465][ C1] [ 120.128471][ C1] [ 120.476404][ C1] Allocated by task 6022: [ 120.480970][ C1] kasan_save_track+0x3e/0x80 [ 120.485861][ C1] __kasan_kmalloc+0x93/0xb0 [ 120.490480][ C1] __kmalloc_node_noprof+0x57a/0x820 [ 120.495878][ C1] bpf_map_area_alloc+0x64/0x180 [ 120.500846][ C1] insn_array_alloc+0x52/0x140 [ 120.505729][ C1] map_create+0xafd/0x16a0 [ 120.510176][ C1] __sys_bpf+0x5f0/0x860 [ 120.514463][ C1] __x64_sys_bpf+0x7c/0x90 [ 120.518904][ C1] do_syscall_64+0xfa/0xf80 [ 120.523431][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.529345][ C1] [ 120.532123][ C1] The buggy address belongs to the object at ffff888029e09000 [ 120.532123][ C1] which belongs to the cache kmalloc-cg-1k of size 1024 [ 120.546940][ C1] The buggy address is located 0 bytes to the right of [ 120.546940][ C1] allocated 944-byte region [ffff888029e09000, ffff888029e093b0) [ 120.561648][ C1] [ 120.563997][ C1] The buggy address belongs to the physical page: [ 120.570468][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29e08 [ 120.579782][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 120.588401][ C1] memcg:ffff888072141701 [ 120.592775][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 120.600366][ C1] page_type: f5(slab) [ 120.604479][ C1] raw: 00fff00000000040 ffff88813ffb0280 dead000000000100 dead000000000122 [ 120.613197][ C1] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff888072141701 [ 120.622163][ C1] head: 00fff00000000040 ffff88813ffb0280 dead000000000100 dead000000000122 [ 120.630861][ C1] head: 0000000000000000 0000000080100010 00000000f5000000 ffff888072141701 [ 120.639640][ C1] head: 00fff00000000003 ffffea0000a78201 00000000ffffffff 00000000ffffffff [ 120.648332][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 120.657020][ C1] page dumped because: kasan: bad access detected [ 120.663551][ C1] page_owner tracks the page as allocated [ 120.669375][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5709, tgid 5709 (dhcpcd-run-hook), ts 83835394493, free_ts 83796353079 [ 120.691283][ C1] post_alloc_hook+0x234/0x290 [ 120.696166][ C1] get_page_from_freelist+0x2365/0x2440 [ 120.701828][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 120.707747][ C1] alloc_pages_mpol+0x232/0x4a0 [ 120.712621][ C1] allocate_slab+0x86/0x3b0 [ 120.717185][ C1] ___slab_alloc+0xf2b/0x1960 [ 120.721890][ C1] __slab_alloc+0x65/0x100 [ 120.726379][ C1] __kmalloc_noprof+0x47d/0x800 [ 120.731357][ C1] alloc_pipe_info+0x1fd/0x4d0 [ 120.736329][ C1] create_pipe_files+0x8a/0x7e0 [ 120.741325][ C1] __do_pipe_flags+0x46/0x1f0 [ 120.746056][ C1] do_pipe2+0x9c/0x170 [ 120.751124][ C1] __x64_sys_pipe2+0x5a/0x70 [ 120.755749][ C1] do_syscall_64+0xfa/0xf80 [ 120.760307][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.766227][ C1] page last free pid 5712 tgid 5712 stack trace: [ 120.772583][ C1] __free_frozen_pages+0xbc8/0xd30 [ 120.777956][ C1] __slab_free+0x21b/0x2a0 [ 120.782931][ C1] qlist_free_all+0x97/0x100 [ 120.787572][ C1] kasan_quarantine_reduce+0x148/0x160 [ 120.793088][ C1] __kasan_slab_alloc+0x22/0x80 [ 120.798086][ C1] kmem_cache_alloc_noprof+0x37d/0x710 [ 120.803668][ C1] vm_area_alloc+0x24/0x140 [ 120.808293][ C1] mmap_region+0xdea/0x1d10 [ 120.812818][ C1] do_mmap+0xc45/0x10d0 [ 120.817008][ C1] vm_mmap_pgoff+0x2a6/0x4d0 [ 120.821832][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 120.826723][ C1] do_syscall_64+0xfa/0xf80 [ 120.831251][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.837443][ C1] [ 120.839784][ C1] Memory state around the buggy address: [ 120.845516][ C1] ffff888029e09280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.853881][ C1] ffff888029e09300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.861968][ C1] >ffff888029e09380: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 120.870238][ C1] ^ [ 120.875966][ C1] ffff888029e09400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.884052][ C1] ffff888029e09480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.892831][ C1] ================================================================== [ 120.901194][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.908506][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 120.917751][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.927900][ C1] Call Trace: [ 120.931223][ C1] [ 120.934195][ C1] dump_stack_lvl+0x99/0x250 [ 120.938816][ C1] ? __asan_memcpy+0x40/0x70 [ 120.943517][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.949090][ C1] ? __pfx__printk+0x10/0x10 [ 120.953776][ C1] vpanic+0x237/0x6d0 [ 120.957786][ C1] ? __pfx_vpanic+0x10/0x10 [ 120.962435][ C1] ? irqentry_exit+0x5dd/0x660 [ 120.967404][ C1] ? trace_irq_disable+0x37/0x100 [ 120.972467][ C1] panic+0xb9/0xc0 [ 120.976396][ C1] ? __pfx_panic+0x10/0x10 [ 120.980844][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 120.986776][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.993146][ C1] ? strnchr+0x5e/0x80 [ 120.997341][ C1] check_panic_on_warn+0x89/0xb0 [ 121.002309][ C1] ? strnchr+0x5e/0x80 [ 121.006399][ C1] end_report+0x6f/0x140 [ 121.010667][ C1] kasan_report+0x129/0x150 [ 121.015198][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 121.020342][ C1] ? strnchr+0x5e/0x80 [ 121.024440][ C1] strnchr+0x5e/0x80 [ 121.028375][ C1] bpf_bprintf_prepare+0x167/0x13d0 [ 121.033714][ C1] ? stack_trace_save+0x9c/0xe0 [ 121.038791][ C1] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 121.044541][ C1] ? kasan_save_stack+0x60/0x60 [ 121.049527][ C1] ? bpf_snprintf+0x47/0x1b0 [ 121.054310][ C1] bpf_snprintf+0xd3/0x1b0 [ 121.058877][ C1] bpf_prog_c2925c0a7ac12d80+0x58/0x60 [ 121.064447][ C1] bpf_trace_run1+0x27f/0x4c0 [ 121.069250][ C1] ? bpf_trace_run1+0x181/0x4c0 [ 121.074129][ C1] ? __pfx_bpf_trace_run1+0x10/0x10 [ 121.079356][ C1] ? __pfx_raise_softirq+0x10/0x10 [ 121.084507][ C1] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 121.090473][ C1] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 121.096171][ C1] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 121.102527][ C1] ? invoke_rcu_core+0xb6/0x200 [ 121.107403][ C1] ? __pfx_invoke_rcu_core+0x10/0x10 [ 121.112813][ C1] trace_rcu_utilization+0x191/0x1c0 [ 121.118143][ C1] rcu_core+0x13fe/0x1870 [ 121.122516][ C1] ? __pfx_rcu_core+0x10/0x10 [ 121.127220][ C1] ? __schedule+0x14d2/0x5000 [ 121.131927][ C1] ? rcu_qs+0xc4/0x170 [ 121.136030][ C1] ? sched_clock_cpu+0x74/0x430 [ 121.140907][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 121.145703][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 121.150965][ C1] handle_softirqs+0x27d/0x850 [ 121.155777][ C1] ? run_ksoftirqd+0x9b/0x100 [ 121.160588][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 121.165901][ C1] ? preempt_schedule_common+0x83/0xd0 [ 121.171474][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 121.176700][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 121.181938][ C1] run_ksoftirqd+0x9b/0x100 [ 121.186491][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 121.192853][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 121.200039][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 121.205510][ C1] smpboot_thread_fn+0x542/0xa60 [ 121.210495][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 121.215702][ C1] kthread+0x711/0x8a0 [ 121.219830][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 121.225604][ C1] ? __pfx_kthread+0x10/0x10 [ 121.230505][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.236105][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 121.241338][ C1] ? __pfx_kthread+0x10/0x10 [ 121.246209][ C1] ret_from_fork+0x599/0xb30 [ 121.250925][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 121.256153][ C1] ? __switch_to_asm+0x39/0x70 [ 121.261220][ C1] ? __switch_to_asm+0x33/0x70 [ 121.266884][ C1] ? __pfx_kthread+0x10/0x10 [ 121.271508][ C1] ret_from_fork_asm+0x1a/0x30 [ 121.276349][ C1] [ 121.280216][ C1] Kernel Offset: disabled [ 121.284837][ C1] Rebooting in 86400 seconds..